Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
File:                     9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json)
Hash identifier:          s0Ofk/oq5IwCrtsPF6ssSDlRi6/cKd+k5FJckFwCRzg=
Subject key identifier:   06:E7:37:7A:61:7F:CF:61:E1:55:6D:49:32:BE:B5:99:A4:42:06:8F
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Certificate issuer:       /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
Manifest number:          0225
Signing time:             Fri 17 Apr 2026 02:40:31 +0000
Manifest this update:     Fri 17 Apr 2026 02:40:30 +0000
Manifest next update:     Fri 24 Apr 2026 02:40:30 +0000
Files and hashes:         1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: tHtCelqhEN0j6ipnAHbN9GqSIBWtMaekgB7eyW7uGcA=)
                          2: 57CB703EBCED11F0A3B2C039C4F9AE02.roa (hash: 45hyCfM+o4HKQEPHEPnA/AUjri6G28j6JkHXuLahCZI=)
                          3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: zX2wxhpVdTYgnBLbUW2HFAPDNMT7jIK2t1BaorSnmuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
        Validity
            Not Before: Apr 17 02:40:30 2026 GMT
            Not After : Apr 24 02:40:30 2026 GMT
        Subject: CN=69e19d9f-e1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:4a:2a:55:9f:85:e3:b3:0e:79:8f:d8:5a:
                    a0:fa:82:c7:75:9e:61:f8:77:2e:00:bc:1c:c4:28:
                    e4:cf:e0:78:30:c4:b4:a0:56:a0:04:32:c5:bb:f8:
                    3b:76:86:0d:59:25:f1:32:24:6f:03:35:97:59:e7:
                    34:56:b6:03:c5:3f:18:46:0b:1a:25:48:38:11:d5:
                    24:47:dc:e9:5d:3c:dd:13:b5:68:9e:8f:58:67:d1:
                    10:96:d9:f2:1f:68:4a:5d:0b:ae:b9:7d:e8:6e:43:
                    12:58:3e:06:ab:2d:d9:23:da:56:a0:9c:fd:7e:93:
                    34:45:d0:ac:e6:90:7a:37:75:7d:46:35:ce:ab:86:
                    28:8a:c9:76:37:6e:d3:7d:8c:b2:d1:42:14:50:f2:
                    1c:07:59:b1:1a:94:58:29:57:3d:56:75:cd:28:09:
                    d6:53:cd:6a:ba:d3:93:f7:f8:a2:f6:5c:c7:1d:3e:
                    66:61:32:17:6b:16:72:b1:76:06:e8:bb:91:09:c1:
                    0b:a0:12:e9:21:68:df:6a:83:ae:28:55:6c:a6:69:
                    2a:c2:9b:20:73:51:ad:35:7f:e2:a7:47:da:62:73:
                    a6:f3:e8:17:c3:0d:bc:6c:fd:84:c8:20:99:dd:7c:
                    0d:9c:86:7b:da:c1:67:e7:52:d8:09:60:d2:d2:a2:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E7:37:7A:61:7F:CF:61:E1:55:6D:49:32:BE:B5:99:A4:42:06:8F
            X509v3 Authority Key Identifier:
                keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:37:bf:63:3b:c3:54:1c:e7:7f:81:14:af:12:27:f9:32:80:
         51:5f:35:0e:ef:37:be:c0:76:81:1f:a1:c3:d7:be:fd:74:17:
         fb:fd:03:8c:c1:33:a7:66:76:70:08:d4:59:d1:57:6c:32:2d:
         e1:cf:f8:66:4e:b8:6c:8c:80:e3:7b:9f:d6:56:3c:8b:76:09:
         af:72:16:64:fe:72:58:c6:78:a7:d9:32:8c:df:b1:7c:8a:48:
         85:82:e7:b2:49:e0:97:ee:10:34:04:02:a4:8a:e6:29:06:ad:
         e1:93:e3:b2:b3:ec:d8:eb:76:ac:b5:c4:db:33:b1:bd:33:6c:
         7c:e0:76:dd:8a:4c:6d:f5:a7:69:45:25:ab:dc:5f:94:70:79:
         dd:08:38:cf:f6:ad:37:9c:ae:2c:ce:5e:57:52:b6:4e:00:64:
         b6:2f:88:d1:5b:64:46:f8:5e:38:85:d6:36:35:41:0c:c6:35:
         52:59:81:a2:e1:32:79:31:de:9d:bb:5d:a6:3c:3e:42:d0:d2:
         ad:1d:f1:60:20:04:36:23:83:25:f8:f1:fb:67:51:cf:f6:8f:
         da:18:f4:95:7e:d7:20:f0:81:31:be:61:61:fa:bc:02:13:40:
         7b:53:35:81:6e:63:ef:a9:00:1a:04:8d:02:fe:df:6e:69:8a:
         19:65:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:22 2026 by rpki-client